VulnSocial

CVE-2023-20598(amd / radeon_pro_w5500)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

amd CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-269

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • radeon_pro_w5500
  • radeon_pro_w5700
  • radeon_pro_w6300
  • radeon_pro_w6400

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
amd
Products
radeon_pro_w5500radeon_pro_w5700radeon_pro_w6300radeon_pro_w6400radeon_pro_w6600radeon_pro_w6800radeon_pro_w7500radeon_pro_w7600radeon_pro_w7800radeon_pro_w7900

1 version affected across 107 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-22: 109-22
Full discourse1 post
  • Rhys@RhysDowning_

    Came across a really interesting BYOVD chain recently The loader transitions execution from user mode to kernel mode without triggering UAC, downloads ntkrnlmp.pdb from Microsoft’s symbol server, decrypts the AMD PDFWKRNL.sys driver vulnerable to CVE-2023-20598, and zeroes kernel callbacks associated with 20 security drivers across seven vendors. This blinds EDR products before the loader deploys what we are tracking as a new information-stealing malware family called Lunex, targeting the CIS region. Final payload after BYOVD blinds EDR: psychedeliclove.exe, full C2 agent. 7 browsers, 6 wallets, Chrome/Edge NMH persistence via com.lunex.explorer. Triple persistence. Live C2 panel at time of analysis. I have been unable to find any documented technical analysis of the binary. However, I discovered that @btcoolteam conducted OSINT research into the Lunex panels in June, which appears to be related. I will be publishing a blog with a more detailed analysis soon. IOCs: hxxp[://]107[.]175[.]82[.]242[:]9000/wilow/psychedeliclove[.]exe hxxp[://]193[.]178[.]159[.]128[:]8080 uasputnik[.]com Loader: bf14cd6c3328ebd08e940478b5d1da04e9e5aa576d045d41950bf4f1e2456dd8 Driver: 6e8b49cf70bf854e8c59c7d27cefa89406caf8978461190dabb86dafcd8554e1 Stealer: 06f434695f93d7fd11eeff71358ff69fed79d310a66d993bbcc4ff979c117c90 #malware #BYOVD #threatintel

    1104083
    478 followersView on X
CPE platform detail108 entries

108 of 108 entries

PartVendorProductVersionTarget SWTarget HW
HWamdradeon_pro_w5500---
HWamdradeon_pro_w5700---
HWamdradeon_pro_w6300---
HWamdradeon_pro_w6400---
HWamdradeon_pro_w6600---
HWamdradeon_pro_w6800---
HWamdradeon_pro_w7500---
HWamdradeon_pro_w7600---
HWamdradeon_pro_w7800---
HWamdradeon_pro_w7900---
HWamdradeon_rx_5300---
HWamdradeon_rx_5300_xt---
HWamdradeon_rx_5300m---
HWamdradeon_rx_5500---
HWamdradeon_rx_5500_xt---
HWamdradeon_rx_5500m---
HWamdradeon_rx_5600---
HWamdradeon_rx_5600_xt---
HWamdradeon_rx_5600m---
HWamdradeon_rx_5700---
HWamdradeon_rx_5700_xt---
HWamdradeon_rx_5700m---
HWamdradeon_rx_6300m---
HWamdradeon_rx_6400---
HWamdradeon_rx_6450m---
HWamdradeon_rx_6500_xt---
HWamdradeon_rx_6500m---
HWamdradeon_rx_6550m---
HWamdradeon_rx_6550s---
HWamdradeon_rx_6600---
HWamdradeon_rx_6600_xt---
HWamdradeon_rx_6600m---
HWamdradeon_rx_6600s---
HWamdradeon_rx_6650_xt---
HWamdradeon_rx_6650m---
HWamdradeon_rx_6650m_xt---
HWamdradeon_rx_6700---
HWamdradeon_rx_6700_xt---
HWamdradeon_rx_6700m---
HWamdradeon_rx_6700s---
HWamdradeon_rx_6750_gre_10gb---
HWamdradeon_rx_6750_gre_12gb---
HWamdradeon_rx_6750_xt---
HWamdradeon_rx_6800---
HWamdradeon_rx_6800_xt---
HWamdradeon_rx_6800s---
HWamdradeon_rx_6900_xt---
HWamdradeon_rx_6950_xt---
HWamdradeon_rx_7600---
HWamdradeon_rx_7600m---
HWamdradeon_rx_7600m_xt---
HWamdradeon_rx_7600s---
HWamdradeon_rx_7700_xt---
HWamdradeon_rx_7700s---
HWamdradeon_rx_7800_xt---
HWamdradeon_rx_7900_gre---
HWamdradeon_rx_7900_xt---
HWamdradeon_rx_7900_xtx---
HWamdradeon_rx_7900m---
Appamdradeon_software---
Appamdradeon_software---
HWamdryzen_3_7320u---
HWamdryzen_3_7335u---
HWamdryzen_3_7440u---
HWamdryzen_5_6600h---
HWamdryzen_5_6600hs---
HWamdryzen_5_6600u---
HWamdryzen_5_7500f---
HWamdryzen_5_7520u---
HWamdryzen_5_7535hs---
HWamdryzen_5_7535u---
HWamdryzen_5_7540u---
HWamdryzen_5_7600---
HWamdryzen_5_7600x---
HWamdryzen_5_7640h---
HWamdryzen_5_7640u---
HWamdryzen_5_7645hx---
HWamdryzen_5_pro_7640hs---
HWamdryzen_5_pro_7645---
HWamdryzen_7_6800h---
HWamdryzen_7_6800hs---
HWamdryzen_7_6800u---
HWamdryzen_7_7700---
HWamdryzen_7_7700x---
HWamdryzen_7_7735hs---
HWamdryzen_7_7735u---
HWamdryzen_7_7736u---
HWamdryzen_7_7745hx---
HWamdryzen_7_7800x3d---
HWamdryzen_7_7840h---
HWamdryzen_7_7840u---
HWamdryzen_7_pro_7745---
HWamdryzen_7_pro_7840hs---
HWamdryzen_9_6900hs---
HWamdryzen_9_6900hx---
HWamdryzen_9_6980hs---
HWamdryzen_9_6980hx---
HWamdryzen_9_7845hx---
HWamdryzen_9_7900---
HWamdryzen_9_7900x---
HWamdryzen_9_7900x3d---
HWamdryzen_9_7940h---
HWamdryzen_9_7945hx---
HWamdryzen_9_7945hx3d---
HWamdryzen_9_7950x---
HWamdryzen_9_7950x3d---
HWamdryzen_9_pro_7940hs---
HWamdryzen_9_pro_7945---

Explore more

Back to dashboardamd CVEsradeon_pro_w5500 vulnerabilities